Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Wordfence Intelligence Weekly WordPress Vulnerability Report (February 23, 2026 to March 1, 2026)

๐Ÿ—“๏ธย 05 Mar 2026ย 19:30:18Reported byย Chloe ChamberlandTypeย 
wordfence
ย wordfence๐Ÿ”—ย www.wordfence.com๐Ÿ‘ย 22ย Views

Wordfence Intelligence weekly report on WordPress vulnerabilities and Triple Threat Bug Bounty bonuses.

Related
ReporterTitlePublishedViews
Family
Vulnrichment		CVE-2026-28107 WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28108 WordPress LambertGroup - AllInOne - Banner with Thumbnails plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28109 WordPress LambertGroup - AllInOne - Content Slider plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28110 WordPress LambertGroup - AllInOne - Banner with Playlist plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28112 WordPress AllInOne - Banner Rotator plugin <= 3.8 - Reflected Cross Site Scripting (XSS) vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28113 WordPress Ultimate Learning Pro plugin <= 3.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28114 WordPress WooCommerce License Manager plugin <= 7.0.6 - Arbitrary File Upload vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28115 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28117 WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
5 Mar 202605:54
โ€“vulnrichment
Vulnrichment		CVE-2026-28118 WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
5 Mar 202605:54
โ€“vulnrichment
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Mar 2026 19:30Current
7.2High risk
Vulners AI Score7.2
CVSS 3.110
CVSS 49.3
EPSS0.01722
SSVC
Wordfence IntelligenceWordPress vulnerabilitiesBug bountyHigh threat vulnerabilitiesTriple ThreatActive installsVulnerability databaseSubmit vulnerabilities
22